Configuring BlackBerry Hub+ with Microsoft Azure using OAuth

Last updated:

BlackBerry is beta testing a BlackBerry Hub+ Services configuration for users in Office 365 that utilize Modern Authentication. Modern Authentication simplifies authentication for developers by providing identity as a service (IaaS), with support for industry-standard protocols such as OAuth 2.0.

Any app that wants to outsource authentication to Azure AD must first be registered in Azure AD, which registers and uniquely identifies the app in the directory, with an App ID.

You can use the managed configurations for BlackBerry Hub+ Services to configure email settings and preferences for BlackBerry Hub+ Services users in your organization.

If you manage your company’s devices with BlackBerry UEM version 12.7 or later, these email settings are removed from the Email profile section, and found in the BlackBerry Hub+ Services app settings. If you configure settings in the Email profile section and in the app settings, the app settings take precedence if both are assigned.

Step 1: Azure Console – Add application

  1. Setup the application in Azure console in the normal manner.
  2. Name: (select descriptive name for BlackBerry Hub, this is used by the IT administrator, and has no impact on the application)
  3. Application type: select “Native”
  4. Redirect link.
  5. Note the “Application ID”, this will be used to enter into UEM managed configuration for BlackBerry Hub+ Services.

Step 2: Azure Console – Configure a client application to access web APIs – Section 5 (permissions)

  1. Select API: Microsoft Graph
  2. Select Permissions: “Sign in an read user profile” under “Delegated Permissions”
  3. Select API: Office 365 Exchange Online
  4. Select Permissions: Access mailboxes via Exchange ActiveSync

Step 3: Azure Console – Assign users or groups the added BlackBerry Hub+ Services application

Step 4: UEM Console – Setup BlackBerry Hub+ Services through the managed configuration

  1. Ensure that UEM 12.7 or later is used to access managed configurations – follow additional instructions to push application to users.
  2. Ensure that you’re on Hub+ Services version 1.6.1 or later.
  3. While setting up BlackBerry Hub+ Services managed configuration fields, you’ll also find “OAuth authentication: Client ID”. This is where you’ll enter the “Application ID” from Azure Console when you registered BlackBerry Hub.

Step 5: User device client setup (BlackBerry Hub)
Once the UEM managed account is pushed to the user, they’ll get a notification to log in. During the account setup they’ll be automatically brought to the Azure login screen.

Rapid Mobile

Rapid Mobile uses cookies, tokens, and other third party scripts to recognise visitors of our sites and services, remember your settings and privacy choices, and - depending on your settings and privacy choices - enable us and some key partners to collect information about you so that we can improve our services and deliver relevant ads.


By continuing to use our site or clicking I Accept, you agree that Rapid Mobile and our key partners may collect data and use cookies for personalised ads and other purposes, as described more fully in our privacy policy.


You can change your settings at any time by clicking Manage Settings or by visiting our Privacy Centre for more detailed information.


Privacy Settings saved!
Cookie Services

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site.

We track anonymized user information to improve our website.
  • _ga
  • _gid
  • _gat

Decline all Services
Accept all Services